Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law nor by contract, nor is it necessary for the conclusion of a contract. You are under no obligation to provide this data. Failure to provide such data will have no consequences. This applies only insofar as no other information is provided regarding the processing operations described below.
“Personal data” refers to any information relating to an identified or identifiable natural person.

Server log files
You may visit our websites without providing any personal details.
Each time you access our website
,
usage data is transmitted to us or our web host / IT service provider via your internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the volume of data transferred and the requesting provider.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services. 
 
Contact

Data controller
Please contact us if you wish. The data controller is: Andreas Mansfeld, Gotenstrasse 21, 68259 Mannheim, Germany, 0621 / 43 02 54 13, service@sauna-oefen.com

Unsolicited contact from customers via email
If you contact us unsolicited by email for business purposes, we will only collect your personal data (name, email address, message text) to the extent that you provide it. The purpose of this data processing is to handle and respond to your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice regarding an interest in purchasing, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.

Collection and processing when using the contact form
When youuse the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to establish contact.
If the contact serves to carry out pre-contractual measures (e.g. advice regarding an interest in purchasing, preparation of a quotation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your enquiry. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.

Collection and processing when using the withdrawal button 
If you have entered into a contract via our website, we provide you with a withdrawal function (withdrawal button) through which you can submit your notice of withdrawal immediately. 
When you use the cancellation function, we collect your personal data (name, email address, details identifying the contract or part of the contract you wish to cancel, and the time (date and time) of sending the notice of cancellation) only to the extent that you have provided it. The purpose of this data processing is to provide you with the legally prescribed option to withdraw from your contract and to ensure the proper processing of your withdrawal. 
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) of the GDPR. Otherwise, data processing is carried out on the basis of Article 6(1)(c) of the GDPR, to fulfil a legal obligation to provide you with a withdrawal function on our website. 
We use your email address solely to process your notice of withdrawal. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use. 
 
The processing of your personal data serves the purpose of complying with the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Article 6(1)(c) of the GDPR. This data processing is also carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in being able to provide you with a user-friendly option to withdraw your consent. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR.
 
Customer account Orders      

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of this data is necessary for the conclusion of the contract. Failure to provide this data means that no contract can be concluded. Processing is carried out on the basis of Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you. 
Your data may be disclosed, for example, to courier companies, dropshipping or fulfilment providers, payment service providers, order processing service providers and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of data transfer is kept to a minimum.
 
Advertising      


Use of your email address for stock availability notifications
We offer a stock availability notification service on our website. Should an item be temporarily out of stock, you have the option to enter your email address on the relevant product page and be notified by us via email once it becomes available, provided you have consented to this. Once the item becomes available, you will receive a one-off email notification regarding the availability of the relevant item. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. You may unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
 
Delivery service providers      

Disclosure of your email address to delivery companies to provide information on delivery status
We will pass on your email address to the delivery company as part of the contract fulfilment process, provided you have expressly consented to this during the ordering process. The purpose of this transfer is to inform you of the dispatch status by email. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time by notifying us or the courier company, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Payment service providers      

Use of PayPal
We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy. You can find this athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Express
On our website, we use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via the PayPal Express payment service.
In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent up until the time of withdrawal.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Article 6(1)(b) of the GDPR.
Further information on data processing when using the PayPal Express payment service can be found in the relevant privacy policy athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS

Use of the payment service provider Mollie
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; ‘Mollie’) for payment processing on our website. The purpose of this data processing is to enable us to offer you various payment methods via the payment service provider Mollie. Once you have selected one of Mollie’s payment options, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your web browser and device type, and, in some cases, your first name and surname, your address details and information about the product or service you have purchased from us. This data processing is carried out on the basis of Article 6(1)(b) of the GDPR. Further information on data processing when using the payment service provider Mollie can be found in the relevant privacy policyat https://www.mollie.com/de/legal/privacy
 
Address verification
On our website, we offer you the option to check certain entries in the address forms of our online shop for input errors in real time. This is intended to prevent problems with the delivery of the products you have ordered due to incorrect details.

Furthermore, we wish to ensure that your contact details are valid for sending information regarding your order or for any necessary enquiries.

We use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker, to provide these functions. The service provider processes the data exclusively in accordance with our instructions. The legal basis for the transfer, processing and temporary storage of the data by the service provider is Article 6(1)(b) of the GDPR, as it is strictly necessary for the performance of the contract or for the implementation of pre-contractual measures that some of the data you enter into the input form is checked for accuracy.

The following data is processed by the service provider:

– Address (country, town, postcode, street, house number where applicable)

The data is processed separately by the service provider and is not merged. Enquiries are deleted by the service provider as soon as the status of the data entered has been determined and the data has been saved in the online shop, but no later than 30 days after submission.


Cookies

Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a distinctive string of characters that enables the browser to be uniquely identified when the website is visited again
.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide on a case-by-case basis whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that you may then not
be able to
make full use of all the features of this website.
The links below provide information on how to manage (including disabling) cookies in the most common browsers:
 
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after you have changed pages and to offer you services. Some features of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after you have navigated to another page.
The use of cookies or similar technologies is based on Section 25(2) of the TDDDG. The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object at any time to the processing of your personal data on grounds relating to your particular situation.
Use of the Cookie Consent Manager CCM19
We use the Cookie Consent Manager CCM19 from Papoo Software & Media GmbH (Auguststr. 4, 53229 Bonn; “CCM19”).
This plug-in enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent that has already been given. The purpose of data processing is to obtain and document the necessary consents to data processing and thereby comply with legal obligations.
Cookies are used for this purpose. In doing so, the following information, amongst other things, may be collected, stored and, where applicable, transferred to CCM19: a randomly generated ID, consent status, and the date and time of consent or refusal. The data is stored for 1 year and 1 month and is subsequently deleted. This data is not passed on to any other third parties.
Data processing is carried out to fulfil a legal obligation on the basis of Article 6(1)(c) of the GDPR.
Further information on data protection at CCM19 can be found at:https://www.ccm19.de/datenschutzerklaerung.html.


Analysis Advertising tracking      


Use of Google Analytics 4
We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’), on our website.
The purpose of data processing is to analyse this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will, on behalf of the operator of this website, use the information collected to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website and internet usage. 
The following information, amongst other things, may be collected: IP address, date and time of page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website via which you accessed our website), location data, purchasing activity. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.

Your IP address is truncated by Google beforehand within Member States of the European Union or in other signatory states to the Agreement on the European Economic Area.

The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

The information generated in this way regarding your use of this website is usually transmitted to a Google server in the USA and stored there. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found athttps://policies.google.com/technologies/partner-sites, athttps://policies.google.com/privacy?hl=de&gl=deand athttps://business.safety.google/privacy/.

Use of Mouseflow
We use the analytics tool provided by Mouseflow ApS (Flaesketorvet 68, 1711 Copenhagen, Denmark; “Mouseflow”) on our website.
Data processing serves the purpose of personalising and analysing this website and its visitors. Mouseflow uses technologies such as cookies, web beacons and scripts. Cookies enable the internet browser to be recognised. The following information, amongst other things, may be collected: IP address, click path, information about the browser and operating system you are using, pages visited, time spent on our website, content viewed, and location data. Usage profiles may be created from this data under a pseudonym. The Mouseflow web tracking tool records randomly selected individual visits (using only an anonymised IP address). This generates a log of mouse movements and clicks with the aim of randomly replaying individual website visits and deriving potential improvements for the website from this. The data collected using Mouseflow technologies is not used to personally identify visitors to this website without the data subject’s separate consent, nor is it combined with personal data relating to the holder of the pseudonym.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Mouseflow has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on the collection and use of your data by Mouseflow can be found athttps://mouseflow.com/legal/visitor/.

Use of Google Ads conversion tracking
We use the online advertising programme ‘Google Ads’ on our website and, as part of this, conversion tracking (visit action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an advert displayed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advert and were redirected to that page. Each Google Ads customer receives a different cookie. Consequently, it is not possible for cookies to be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to compile conversion statistics. This tells us the total number of users who clicked on one of our adverts and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to Google LLC’s servers in the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data takes place with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information and Google’s privacy policy can be found at:https://www.google.de/policies/privacy/orhttps://business.safety.google/privacy/
 
Use of the remarketing or ‘Similar Audiences’ function provided by Google Inc.
We use the remarketing or ‘SimilarAudiences’ function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; ‘Google’) on our website.
The purpose of this feature is to analyse visitor behaviour and interests. Google uses cookies to analyse website usage, which forms the basis for the creation of interest-based adverts. These cookies are used to record visits to the website and to collect anonymised data on website usage. No personal data relating to website visitors is stored. If you subsequently visit another website within the Google Display Network, you will be shown adverts that are highly likely to take into account the product and information sections you have previously viewed.
Your data may be transferred to servers operated by Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at:https://www.google.com/privacy/ads/andhttps://business.safety.google/privacy/
 

Plug-ins and other features

Use of Google reCAPTCHA
We use the reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website as part of a data processing agreement. The purpose of this check is to distinguish between input by a human and that generated by automated, machine-based processing. To this end, your input is transmitted to Google and processed there. In addition, your IP address and, where applicable, any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, where applicable, may also be transferred to servers operated by Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is subject to your consent on the basis of Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Use of Google Invisible reCAPTCHA
We use theInvisible reCAPTCHA service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website. 
This serves the purpose of distinguishing between input by a human and that generated by automated, machine-based processing. In the background, Google collects and analyses usage data, which is used by Invisible reCAPTCHA to distinguish regular users from bots. To this end, your input is transmitted to Google and processed there. In addition, your IP address and, where applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and, where applicable, may also be transferred to servers operated by Google LLC in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore obliged to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent in accordance with Section 25(1), first sentence, of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent on the basis of Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Further information on Google reCAPTCHA and the associated privacy policy can be found at:https://www.google.com/recaptcha/intro/android.htmlandhttps://www.google.com/privacy

Use of Cloudflare
We use the Cloudflare CDN (Content Delivery Network) provided by Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a transnational network of servers in various data centres, to which our web server connects and through which certain content on our website is delivered.
The purpose of this data processing is to optimise our website’s loading times and thereby make our service more user-friendly.
The following information, amongst other things, may be collected: IP address, system configuration information, and information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The processing of your personal data is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in designing the website in a way that meets your needs and is targeted to your interests. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
Further information on data protection when using Cloudflare can be found athttps://www.cloudflare.com/de-de/privacypolicy/.

Inclusion of the Händlerbund member logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11–13, 04315 Leipzig) is featured on our website. When you visit our website, the browser used on your device automatically sends information to the Händlerbund e.V. server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected automatically and stored until it is automatically deleted:
  • IP address of the requesting computer,
  • date and time of access,
  • Name and URL of the file accessed,
  • the website from which the access originated (referrer URL),
  • the browser used and, where applicable, your computer’s operating system, as well as the name of your internet service provider. 
The temporary storage of the IP address by the system is necessary to enable the website to be delivered. To this end, the IP address must remain stored for the duration of the session. The data is stored in log files to ensure the website functions correctly. Furthermore, the data is used to optimise the website and to ensure the security of the IT systems. This data is not stored together with any other personal data. The legal basis for data processing is Article 6(1)(f) of the GDPR.

Data subjects’ rights and retention period


storage period Once the contract has been fully processed, the data is initially stored for the duration of the warranty period, and thereafter in accordance with statutory retention periods, in particular those under tax and commercial law, and then deleted once these periods have expired, provided you have not consented to further processing and use.

Rights of the data subject
Provided the legal requirements are met, you are entitled to the following rights under Articles 15 to 20 of the GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing, and the right to data portability. Furthermore, under Article 21(1) of the GDPR, you have the right to object to processing based on Article 6(1)(f) of the GDPR, as well as to processing for the purposes of direct marketing.


Right to lodge a complaint with the supervisory authority
Under Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. You may, amongst other things, lodge a complaint with the supervisory authority responsible for us, which you can contact using the following details: State Commissioner for Data Protection and Freedom of Information, Baden-Württemberg Königstrasse 10 a 70173 Stuttgart Tel.: +49 711 6155410 Fax: +49 711 61554115 Email:








poststelle@lfdi.bwl.de

Right to object
Where the processing of personal data listed here is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time with effect for the future. Once an objection has been lodged, the processing of the data in question will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves to establish, exercise or defend legal claims.

Pay at Saunaexperte

In our online store we provide you with a wide range of payment methods so that you can conveniently complete your orders.

Nach oben